Lucene search
K

279 matches found

NVD
NVD
added 2023/06/05 4:15 p.m.20 views

CVE-2023-33733

Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file...

7.8CVSS7.8AI score0.30225EPSS
Exploits6References4
ATTACKERKB
ATTACKERKB
added 2023/06/05 4:15 p.m.1 views

CVE-2023-33733

Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file...

7.8CVSS7.2AI score0.30225EPSS
Exploits6References8
OSV
OSV
added 2023/06/05 4:15 p.m.3 views

CVE-2023-33733

Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file...

7.8CVSS7.7AI score0.30225EPSS
Exploits6References4
Prion
Prion
added 2023/06/05 4:15 p.m.29 views

Design/Logic Flaw

Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file...

4.4CVSS7.7AI score0.30225EPSS
Exploits6References3Affected Software1
OSV
OSV
added 2023/06/05 4:15 p.m.0 views

UBUNTU-CVE-2023-33733

Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file...

7.8CVSS6.2AI score0.30225EPSS
Exploits6References5
UbuntuCve
UbuntuCve
added 2023/06/05 4:15 p.m.52 views

CVE-2023-33733

Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file...

7.8CVSS7.2AI score0.30225EPSS
Exploits6References4
Debian CVE
Debian CVE
added 2023/06/05 12:0 a.m.35 views

CVE-2023-33733

Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file...

7.8CVSS7.8AI score0.30225EPSS
Exploits6
CNNVD
CNNVD
added 2023/06/05 12:0 a.m.3 views

Reportlab 安全漏洞

ReportLab is an open source engine for creating data-driven PDF documents and custom vector graphics from ReportLab, Denmark. A security vulnerability exists in Reportlab v3.6.12 and earlier versions, which stems from a vulnerability that allows an attacker to execute arbitrary code by supplying ...

7.8CVSS7.2AI score0.30225EPSS
Exploits6References8
Vulnrichment
Vulnrichment
added 2023/06/05 12:0 a.m.8 views

CVE-2023-33733

Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file...

8AI score0.30225EPSS
Exploits6References3
Cvelist
Cvelist
added 2023/06/05 12:0 a.m.15 views

CVE-2023-33733

Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file...

8.1AI score0.30225EPSS
Exploits6References3
CVE
CVE
added 2023/06/05 12:0 a.m.130 views

CVE-2023-33733

CVE-2023-33733 affects the Python library ReportLab (python-reportlab). The vulnerability allows arbitrary code execution by processing a crafted PDF. Public advisories in the connected documents confirm fixed versions across distributions: Debian bookworm (python-reportlab 3.6.12-1+deb12u1) and ...

7.8CVSS7.6AI score0.30225EPSS
Exploits6References4Affected Software1
GithubExploit
GithubExploit
added 2023/05/30 10:22 p.m.864 views

Exploit for Code Injection in Reportlab

CODE INJECTION VULNERABILITY IN REPORTLAB PYTHON LIBRARY tl...

7.8CVSS8.2AI score0.30225EPSS
Exploits6
OpenVAS
OpenVAS
added 2023/05/23 12:0 a.m.5 views

Mageia: Security Advisory (MGASA-2023-0186)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References4
Mageia
Mageia
added 2023/05/22 3:30 p.m.9 views

Updated python-reportlab packages fix security vulnerability

Updates python3-reportlab includes a security fix and other minor bug fixes. See references for details...

7AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/05/22 12:0 a.m.1 views

PT-2023-36344 · Unknown · Python3-Reportlab

Name of the Vulnerable Software and Affected Versions: python3-reportlab affected versions not specified Description: The issue concerns a security fix in python3-reportlab, along with other minor bug fixes. Recommendations: At the moment, there is no information about a newer version that contai...

7AI score
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 4:7 a.m.1 views

SUSE CVE-2019-17626

ReportLab through 3.5.26 allows remote code execution because of toColorevalarg in colors.py, as demonstrated by a crafted XML document with 'span color="' followed by arbitrary Python code...

7.6CVSS8.2AI score0.16839EPSS
Exploits1References7
SUSE CVE
SUSE CVE
added 2023/02/15 3:52 a.m.1 views

SUSE CVE-2020-28463

All versions of package reportlab are vulnerable to Server-side Request Forgery SSRF via img tags. In order to reduce risk, use trustedSchemes & trustedHosts see in Reportlab's documentation Steps to reproduce by Karan Bamal: 1. Download and install the latest package of reportlab 2. Go to demos ...

5CVSS7.7AI score0.0116EPSS
Exploits1References6
OSV
OSV
added 2022/09/02 11:4 a.m.1 views

OESA-2022-1887 python-reportlab security update

The ReportLab Toolkit. An Open Source Python library for generating PDFs and graphics. Security Fixes: All versions of package reportlab are vulnerable to Server-side Request Forgery SSRF via img tags. In order to reduce risk, use trustedSchemes & trustedHosts see in Reportlab's documentation Ste...

6.5CVSS7AI score0.0116EPSS
Exploits1References2
IBM Security Bulletins
IBM Security Bulletins
added 2022/08/23 10:32 p.m.140 views

Security Bulletin: IBM Spectrum Discover is vulnerable to multiple vulnerabilities

Summary RamdaCVE-2021-42581 is vulnerable to remote attackers to execute arbitrary code on the system, caused by a prototype pollution in functions. An attacker could exploit this vulnerability to execute arbitrary code on the system. Node-forgeCVE-2022-24773, 217313, CVE-2022-24771, CVE-2020-772...

9.8CVSS9.8AI score0.02085EPSS
Exploits18Affected Software1
vulnersOsv
vulnersOsv
added 2022/05/24 10:0 p.m.0 views

bookscrape (>=0.0.1.dev1 <=0.0.2b7), codeforlife-portal (>=1.1.1 <=2.28.1) +53 more potentially affected by CVE-2019-17626 via reportlab (>=3.1.44 <=3.5.26)

reportlab PYPI version =3.1.44, =0.0.1.dev1, =1.1.1, =0.7.0, =0.1.0, =0.0.2, =1.1.0, =2.7.0, =2.3.0.18073018, =2.3.0.18070609, =2.3.0.18070422, =0.1.0, =0.733.0, =0.736.0 and more Source cves: CVE-2019-17626 Source advisory: OSV:GHSA-QPG2-VX7J-3869...

9.8CVSS7.2AI score0.16839EPSS
Exploits1
Rows per page
Query Builder